Medium severity6.5NVD Advisory· Published Jul 20, 2023· Updated Jun 17, 2026
CVE-2022-28737
CVE-2022-28737
Description
There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code execution is not discarded in such scenario.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
64- osv-coords62 versionspkg:rpm/almalinux/grub2-commonpkg:rpm/almalinux/grub2-efi-aa64pkg:rpm/almalinux/grub2-efi-aa64-cdbootpkg:rpm/almalinux/grub2-efi-aa64-modulespkg:rpm/almalinux/grub2-efi-ia32pkg:rpm/almalinux/grub2-efi-ia32-cdbootpkg:rpm/almalinux/grub2-efi-ia32-modulespkg:rpm/almalinux/grub2-efi-x64pkg:rpm/almalinux/grub2-efi-x64-cdbootpkg:rpm/almalinux/grub2-efi-x64-modulespkg:rpm/almalinux/grub2-pcpkg:rpm/almalinux/grub2-pc-modulespkg:rpm/almalinux/grub2-ppc64lepkg:rpm/almalinux/grub2-ppc64le-modulespkg:rpm/almalinux/grub2-toolspkg:rpm/almalinux/grub2-tools-efipkg:rpm/almalinux/grub2-tools-extrapkg:rpm/almalinux/grub2-tools-minimalpkg:rpm/almalinux/shim-aa64pkg:rpm/almalinux/shim-ia32pkg:rpm/almalinux/shim-unsigned-x64pkg:rpm/almalinux/shim-x64pkg:rpm/opensuse/shim&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/shim&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/shim&distro=openSUSE%20Leap%20Micro%205.3pkg:rpm/opensuse/shim&distro=openSUSE%20Leap%20Micro%205.4pkg:rpm/suse/shim&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/shim&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOSpkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOSpkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSSpkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Micro%205.1pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-ESPOSpkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSSpkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSSpkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/shim&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4pkg:rpm/suse/shim&distro=SUSE%20Manager%20Proxy%204.2pkg:rpm/suse/shim&distro=SUSE%20Manager%20Proxy%204.3pkg:rpm/suse/shim&distro=SUSE%20Manager%20Server%204.2pkg:rpm/suse/shim&distro=SUSE%20Manager%20Server%204.3pkg:rpm/suse/shim&distro=SUSE%20OpenStack%20Cloud%209pkg:rpm/suse/shim&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
< 1:2.02-123.el8_6.8.alma+ 61 more
- (no CPE)range: < 1:2.02-123.el8_6.8.alma
- (no CPE)range: < 1:2.02-123.el8_6.8.alma
- (no CPE)range: < 1:2.02-123.el8_6.8.alma
- (no CPE)range: < 1:2.02-123.el8_6.8.alma
- (no CPE)range: < 1:2.02-123.el8_6.8.alma
- (no CPE)range: < 1:2.02-123.el8_6.8.alma
- (no CPE)range: < 1:2.02-123.el8_6.8.alma
- (no CPE)range: < 1:2.02-123.el8_6.8.alma
- (no CPE)range: < 1:2.02-123.el8_6.8.alma
- (no CPE)range: < 1:2.02-123.el8_6.8.alma
- (no CPE)range: < 1:2.02-123.el8_6.8.alma
- (no CPE)range: < 1:2.02-123.el8_6.8.alma
- (no CPE)range: < 1:2.06-27.el9_0.7.alma
- (no CPE)range: < 1:2.02-123.el8_6.8.alma
- (no CPE)range: < 1:2.02-123.el8_6.8.alma
- (no CPE)range: < 1:2.02-123.el8_6.8.alma
- (no CPE)range: < 1:2.02-123.el8_6.8.alma
- (no CPE)range: < 1:2.02-123.el8_6.8.alma
- (no CPE)range: < 15.6-1.el8.alma
- (no CPE)range: < 15.6-1.el8.alma
- (no CPE)range: < 15.6-1.el8.alma
- (no CPE)range: < 15.6-1.el8.alma
- (no CPE)range: < 15.7-150300.4.11.1
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.7-150300.4.11.1
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.7-150100.3.35.1
- (no CPE)range: < 15.7-150300.4.11.1
- (no CPE)range: < 15.7-150100.3.35.1
- (no CPE)range: < 15.7-150100.3.35.1
- (no CPE)range: < 15.7-150300.4.11.1
- (no CPE)range: < 15.7-150300.4.11.1
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.7-150300.4.11.1
- (no CPE)range: < 15.7-150300.4.11.1
- (no CPE)range: < 15.7-150300.4.11.1
- (no CPE)range: < 15.7-150300.4.11.1
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.7-150300.4.11.1
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.7-150300.4.11.1
- (no CPE)range: < 15.7-22.15.1
- (no CPE)range: < 15.7-25.24.1
- (no CPE)range: < 15.7-25.24.1
- (no CPE)range: < 15.7-25.24.1
- (no CPE)range: < 15.7-150100.3.35.1
- (no CPE)range: < 15.7-150100.3.35.1
- (no CPE)range: < 15.7-150300.4.11.1
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.7-25.24.1
- (no CPE)range: < 15.7-25.24.1
- (no CPE)range: < 15.7-150100.3.35.1
- (no CPE)range: < 15.7-150100.3.35.1
- (no CPE)range: < 15.7-150300.4.11.1
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.7-150300.4.11.1
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.7-150300.4.11.1
- (no CPE)range: < 15.8-150300.4.20.2
- (no CPE)range: < 15.7-25.24.1
- (no CPE)range: < 15.7-25.24.1
- Red Hat Bootloader Team/shimv5Range: 0
Patches
Vulnerability mechanics
References
2- cve.mitre.org/cgi-bin/cvename.cginvdThird Party Advisory
- www.openwall.com/lists/oss-security/2022/06/07/5nvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.